This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json) Hash identifier: ifSU5JTgYiIsxA7Bih+BLtd80/oooePekTPCpszDzrM= Subject key identifier: D2:3A:CD:7A:A2:F3:0D:96:E1:5F:1C:77:20:41:EA:CD:6F:CC:12:45 Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Certificate serial: 019B7290E94D4D54EACAE37F85655CFFACD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft Manifest number: 0683 Signing time: Wed 31 Dec 2025 04:00:58 +0000 Manifest this update: Wed 31 Dec 2025 04:00:58 +0000 Manifest next update: Thu 01 Jan 2026 04:00:58 +0000 Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=) 2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: P9iu3rvENrTZyMDUgTk8UkBBFq1b+n0zryetTYtvZig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:e9:4d:4d:54:ea:ca:e3:7f:85:65:5c:ff:ac:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf Validity Not Before: Dec 31 04:00:58 2025 GMT Not After : Jan 1 04:00:58 2026 GMT Subject: CN=d23acd7aa2f30d96e15f1c772041eacd6fcc1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:50:bd:d4:30:dc:ab:a1:01:94:8c:1e:a6: 5f:f2:b3:a9:3e:a1:df:d8:de:93:82:51:92:88:05: 08:3a:50:41:96:47:1a:d5:45:05:9a:79:bb:1c:a5: aa:54:7b:9e:c3:4e:e2:84:43:c3:74:89:e4:e3:9b: ad:1d:1a:84:8e:62:ff:e6:29:35:92:96:fe:d0:9b: 64:c6:30:61:f4:83:d0:93:46:a9:89:5c:9e:c4:2e: c6:79:d8:a7:b5:86:59:db:d3:3c:af:99:b3:28:f1: 25:ed:e2:5c:ba:85:c0:4b:46:de:8c:4a:ad:f2:64: af:47:34:d5:14:2e:5e:5e:98:e4:bf:e6:00:56:d1: 4f:51:01:17:c9:eb:a2:9f:6b:ac:7a:7e:da:38:e6: 2f:23:7c:15:25:3f:7a:b2:c4:30:ae:db:ad:d2:58: 73:12:ae:81:66:49:69:4b:ae:de:53:0b:43:14:f0: f5:a8:86:77:fa:39:2c:4e:88:c3:df:0c:44:ce:05: 62:b1:7c:d1:79:84:e6:a0:f0:b8:64:bb:9a:2d:17: a8:c1:80:f0:21:fe:21:9a:dc:6b:58:22:10:58:02: ee:a1:23:4e:86:f7:12:a2:d0:9c:1a:7d:fa:79:50: df:c4:a0:53:7a:5e:ab:68:85:03:6a:28:05:3a:82: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:CD:7A:A2:F3:0D:96:E1:5F:1C:77:20:41:EA:CD:6F:CC:12:45 X509v3 Authority Key Identifier: keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2c:d9:ca:0b:1c:da:8a:54:54:f6:54:e5:14:f6:40:e5:a3: 2b:6c:82:2a:52:a3:1e:f8:8f:9e:51:b2:c8:77:a7:15:41:38: 9a:0a:d7:01:df:89:4f:be:24:02:00:ac:33:a8:50:69:59:3c: d0:a4:b0:65:9c:86:12:67:59:d0:83:52:56:67:99:ba:98:5e: 13:82:b0:59:80:4c:07:f1:21:8e:f2:12:31:6f:e0:54:66:3b: 70:fd:cd:39:ab:36:98:4d:b9:f3:a4:2a:19:1a:b2:7e:14:63: ce:ac:28:45:19:d2:22:6d:a2:3e:c1:40:f8:4c:bb:da:b3:17: e3:52:9d:4d:b9:d0:be:db:56:11:c3:83:8d:dd:70:79:71:22: b0:0d:2e:f1:ae:d1:4b:cf:9b:8f:f7:02:36:7c:b2:84:31:92: 8b:59:b4:96:e6:3b:ef:47:6c:9c:48:78:72:c1:27:21:4b:28: 47:83:f6:80:0c:3a:f4:b8:87:14:08:73:22:90:6e:21:69:dc: 0e:db:f0:62:24:e3:c6:51:4b:47:89:1d:d3:be:60:50:69:96: c6:7a:2e:e4:97:32:d1:aa:0c:b9:f0:66:d2:30:ca:ef:8c:0e: ba:e6:be:12:41:61:83:9e:eb:fe:b5:2c:f6:53:db:f0:a8:49: ec:24:23:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykOlNTVTqyuN/hWVc/6zWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2 NGZiY2YwHhcNMjUxMjMxMDQwMDU4WhcNMjYwMTAxMDQwMDU4WjAzMTEwLwYDVQQD EyhkMjNhY2Q3YWEyZjMwZDk2ZTE1ZjFjNzcyMDQxZWFjZDZmY2MxMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle1QvdQw3KuhAZSMHqZf8rOpPqHf 2N6TglGSiAUIOlBBlkca1UUFmnm7HKWqVHuew07ihEPDdInk45utHRqEjmL/5ik1 kpb+0JtkxjBh9IPQk0apiVyexC7GedintYZZ29M8r5mzKPEl7eJcuoXAS0bejEqt 8mSvRzTVFC5eXpjkv+YAVtFPUQEXyeuin2usen7aOOYvI3wVJT96ssQwrtut0lhz Eq6BZklpS67eUwtDFPD1qIZ3+jksTojD3wxEzgVisXzReYTmoPC4ZLuaLReowYDw If4hmtxrWCIQWALuoSNOhvcSotCcGn36eVDfxKBTel6raIUDaigFOoIYkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNI6zXqi8w2W4V8cdyBB6s1vzBJFMB8GA1UdIwQY MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt NTIzZDIwOTI1ZGFkLzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSzZygsc 2opUVPZU5RT2QOWjK2yCKlKjHviPnlGyyHenFUE4mgrXAd+JT74kAgCsM6hQaVk8 0KSwZZyGEmdZ0INSVmeZupheE4KwWYBMB/EhjvISMW/gVGY7cP3NOas2mE2586Qq GRqyfhRjzqwoRRnSIm2iPsFA+Ey72rMX41KdTbnQvttWEcODjd1weXEisA0u8a7R S8+bj/cCNnyyhDGSi1m0luY770dsnEh4csEnIUsoR4P2gAw69LiHFAhzIpBuIWnc DtvwYiTjxlFLR4kd075gUGmWxnou5Jcy0aoMufBm0jDK74wOuua+EkFhg57r/rUs 9lPb8KhJ7CQjWA== -----END CERTIFICATE-----Generated at Wed Dec 31 08:01:41 2025 by rpki-client